This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json) Hash identifier: quP1kIO978i6ff+/fLY7t0Cc2l/FrxU2JlR9jpf8z6I= Subject key identifier: 4A:39:73:65:32:73:60:BD:5C:1F:77:CE:3F:F4:D7:5C:78:AF:CD:50 Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Certificate serial: 019BF650EA815FB1F09C4F1A1BFE0659DF65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft Manifest number: 167A Signing time: Sun 25 Jan 2026 18:00:56 +0000 Manifest this update: Sun 25 Jan 2026 18:00:56 +0000 Manifest next update: Mon 26 Jan 2026 18:00:56 +0000 Files and hashes: 1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=) 2: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=) 3: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=) 4: l7CfLnkZArXswZfoQeoUIu_AgpA.roa (hash: RNWlpQMRGNEnmwW1gZu/IBscvvbH2tY8tCACNrgrNfA=) 5: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=) 6: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=) 7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: 54tzmPnON/ccm6mApSOmXF8yLhkBMVcfbVqHzUXaPQ4=) 8: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ea:81:5f:b1:f0:9c:4f:1a:1b:fe:06:59:df:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Validity Not Before: Jan 25 18:00:56 2026 GMT Not After : Jan 26 18:00:56 2026 GMT Subject: CN=4a397365327360bd5c1f77ce3ff4d75c78afcd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:5c:10:fd:3c:1d:ae:31:77:df:7d:87:d7: 4a:2e:cd:16:60:ca:b9:2a:9e:55:d0:1d:f1:1d:72: 76:db:ae:4c:a4:76:96:83:4a:2e:aa:b1:44:69:c3: 30:a7:04:7d:70:71:c9:0a:d7:21:78:e2:dc:2a:80: f2:45:0a:9c:ad:01:cc:f1:38:56:d7:df:19:6d:50: 18:ab:8b:52:39:c4:ff:ef:3f:93:ee:89:76:79:8e: 16:c7:ce:84:ab:87:63:4a:92:34:50:49:38:27:36: ef:3a:48:a1:8c:52:a6:0d:b7:d3:e7:8e:22:33:8e: 8f:9c:15:83:40:5a:44:9e:3d:ed:ca:26:e6:41:fd: 1a:f4:83:a4:5b:ca:ae:5b:59:a3:6a:c7:f6:7a:1a: 72:61:20:10:cb:56:2e:21:02:e2:9e:48:62:cd:0f: 17:0d:fb:5b:6e:b0:9b:50:b1:33:bd:d0:32:67:dd: ca:9b:f9:01:7e:73:fd:26:84:d9:cc:d8:c0:27:86: dc:3a:df:1e:31:e6:d1:c6:37:32:76:aa:91:90:5e: 0b:7d:ea:9e:ab:a9:33:60:71:01:e5:b8:c0:36:46: 6f:7d:95:ec:01:b0:08:63:04:cb:03:e2:ab:05:25: fc:e9:d5:f3:d0:a7:94:c4:fd:27:37:21:5e:39:6c: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:73:65:32:73:60:BD:5C:1F:77:CE:3F:F4:D7:5C:78:AF:CD:50 X509v3 Authority Key Identifier: keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:54:77:a8:71:e3:a6:30:48:3d:4d:cc:a6:a6:af:b6:0a:cd: 20:f6:4d:4c:d1:8a:01:2a:99:70:38:b3:ba:15:64:47:ae:d8: 48:59:c4:b6:f1:8a:46:0d:dc:6f:9d:3a:09:f5:23:b2:17:c8: 38:ef:3d:62:1c:69:47:01:5d:94:56:f1:9c:41:69:98:a2:bc: 98:db:5b:45:9b:76:ad:bf:95:ca:4a:b0:a2:6b:5d:c1:1e:c0: 14:90:e1:77:83:1c:7c:00:ed:d7:46:a7:e0:38:62:db:c3:63: 8f:b3:05:d2:24:9c:04:14:71:d9:55:f7:17:16:9d:c5:fd:97: 64:e0:a1:ab:a4:c8:91:3c:5d:fa:b1:a0:8b:3f:1e:f0:00:35: 2b:13:a2:92:36:1b:69:05:64:f5:a6:23:26:61:e7:24:26:4b: 70:22:54:cd:43:12:34:2d:b8:6a:78:06:e5:71:82:84:e7:6f: e0:2e:c9:a5:5b:b3:e3:0a:b3:ab:d1:71:22:2b:d0:f6:7f:c9: 59:5f:6b:1c:f2:f9:2e:97:85:13:f9:f8:7b:df:5b:87:3b:79: 6d:c1:59:3a:b5:9e:04:ee:7f:cb:55:5e:db:f8:0b:59:9f:a1: 14:07:2b:a4:7b:9f:39:8b:2b:3f:54:c5:cb:0e:8a:6e:eb:de: fe:58:16:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UOqBX7HwnE8aG/4GWd9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4 Y2NkNjcwHhcNMjYwMTI1MTgwMDU2WhcNMjYwMTI2MTgwMDU2WjAzMTEwLwYDVQQD Eyg0YTM5NzM2NTMyNzM2MGJkNWMxZjc3Y2UzZmY0ZDc1Yzc4YWZjZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogZcEP08Ha4xd999h9dKLs0WYMq5 Kp5V0B3xHXJ2265MpHaWg0ouqrFEacMwpwR9cHHJCtcheOLcKoDyRQqcrQHM8ThW 198ZbVAYq4tSOcT/7z+T7ol2eY4Wx86Eq4djSpI0UEk4JzbvOkihjFKmDbfT544i M46PnBWDQFpEnj3tyibmQf0a9IOkW8quW1mjasf2ehpyYSAQy1YuIQLinkhizQ8X DftbbrCbULEzvdAyZ93Km/kBfnP9JoTZzNjAJ4bcOt8eMebRxjcydqqRkF4Lfeqe q6kzYHEB5bjANkZvfZXsAbAIYwTLA+KrBSX86dXz0KeUxP0nNyFeOWyQbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo5c2Uyc2C9XB93zj/011x4r81QMB8GA1UdIwQY MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt MTA5NTlhYWE4YjNlLzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlR3qHHj pjBIPU3MpqavtgrNIPZNTNGKASqZcDizuhVkR67YSFnEtvGKRg3cb506CfUjshfI OO89YhxpRwFdlFbxnEFpmKK8mNtbRZt2rb+VykqwomtdwR7AFJDhd4McfADt10an 4Dhi28Njj7MF0iScBBRx2VX3Fxadxf2XZOChq6TIkTxd+rGgiz8e8AA1KxOikjYb aQVk9aYjJmHnJCZLcCJUzUMSNC24angG5XGChOdv4C7JpVuz4wqzq9FxIivQ9n/J WV9rHPL5LpeFE/n4e99bhzt5bcFZOrWeBO5/y1Ve2/gLWZ+hFAcrpHufOYsrP1TF yw6Kbuve/lgW3A== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:07 2026 by rpki-client